Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FDA8F4276BB11F18DA1C9A3CE1D38B0.roa
File: 1FDA8F4276BB11F18DA1C9A3CE1D38B0.roa (raw, json)
Hash identifier: BivP7ELrIcqYKqeYW4R8OZtDyBaL/n3HwcBygHI+7xU=
Subject key identifier: 20:23:37:44:9D:85:C0:9E:85:86:F3:FF:CC:28:92:AC:AE:9F:31:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C280
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FDA8F4276BB11F18DA1C9A3CE1D38B0.roa
Signing time: Fri 03 Jul 2026 08:42:29 +0000
ROA not before: Fri 03 Jul 2026 08:42:25 +0000
ROA not after: Mon 10 Aug 2026 08:42:25 +0000
asID: 154177
IP address blocks: 156.244.7.0/24 maxlen: 24
156.244.9.0/24 maxlen: 24
156.244.18.0/24 maxlen: 24
156.244.25.0/24 maxlen: 24
156.244.27.0/24 maxlen: 24
156.244.49.0/24 maxlen: 24
156.244.55.0/24 maxlen: 24
156.244.56.0/23 maxlen: 24
156.244.58.0/23 maxlen: 24
156.244.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115328 (0x1c280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 08:42:25 2026 GMT
Not After : Aug 10 08:42:25 2026 GMT
Subject: CN=6a4775f5-366c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:db:7b:53:4d:8a:4d:e7:02:98:bc:7e:68:
1b:c9:63:a3:da:c1:af:9d:72:c3:df:59:e0:22:f1:
8d:ce:08:76:ea:65:86:0f:28:70:2a:cd:43:69:da:
2b:52:b8:6b:06:8c:5e:5c:60:94:8d:2e:9c:28:95:
cc:6d:2d:17:1a:3c:cc:ae:f8:b4:0a:19:02:4d:8c:
3a:dd:47:84:c1:eb:31:98:73:ce:aa:6c:28:bf:3c:
a5:07:81:41:54:a2:4e:1e:78:f9:fc:44:af:9a:7f:
db:91:5e:51:ce:f2:76:4d:ef:74:36:72:25:ac:94:
58:db:1b:c7:1c:0f:14:26:69:f1:f5:36:74:08:fe:
65:4b:9b:17:19:60:97:bf:0c:33:75:59:f2:10:a0:
7e:99:91:e9:f3:f8:cb:6a:50:7b:45:54:88:c3:66:
2d:91:18:2d:02:a5:0c:40:37:3d:09:1e:15:8c:50:
7f:60:95:d2:c8:ea:57:86:4e:a6:d4:27:d7:65:a7:
57:9b:f2:c2:73:b0:b2:6b:61:2a:08:9f:a1:b8:1a:
c2:97:6c:dc:32:17:72:e6:e8:0f:18:8d:35:62:9d:
fd:25:bc:de:73:12:b3:22:48:8c:eb:ee:af:37:a6:
30:48:af:0c:e3:c3:4c:18:5a:8d:18:20:b3:87:b3:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:23:37:44:9D:85:C0:9E:85:86:F3:FF:CC:28:92:AC:AE:9F:31:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FDA8F4276BB11F18DA1C9A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.7.0/24
156.244.9.0/24
156.244.18.0/24
156.244.25.0/24
156.244.27.0/24
156.244.49.0/24
156.244.55.0-156.244.59.255
156.244.62.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:ce:82:36:fd:bd:83:e0:fb:64:87:f8:5a:46:4e:6e:2b:d8:
e6:44:94:db:5f:19:69:ad:ec:cc:37:ec:9d:4b:9c:90:22:d5:
ee:9f:bd:ad:c9:78:9d:ca:02:b0:3a:26:e9:b9:cc:4b:19:c7:
4a:03:31:98:b6:74:9c:31:f0:82:36:f6:31:99:e9:1e:f9:47:
dd:d0:86:37:b2:fa:39:28:35:ac:21:03:e9:6b:20:2a:65:0d:
7b:2f:72:33:75:e3:ee:c6:15:6b:f6:e6:5d:0f:04:d5:ef:c9:
c0:3d:13:52:99:dc:00:7e:54:e3:6a:13:dd:73:40:2d:77:27:
ae:45:1c:0b:b2:06:fc:84:1e:68:87:e4:d7:f4:25:38:fe:1c:
f1:dd:23:23:ff:be:73:2f:28:b3:31:d2:7e:01:2e:ca:53:d7:
ea:77:e7:ba:bb:4e:56:0c:eb:b9:da:a4:8d:d1:eb:2a:d8:41:
42:b9:17:83:a8:1b:41:1c:b6:a0:a3:fb:91:6c:07:cf:6c:2d:
fa:0e:3e:19:37:e0:6b:20:7d:60:2a:88:de:eb:70:85:e2:ae:
b3:c4:3d:fb:a9:cd:76:02:31:f1:ec:b6:ca:aa:53:fa:ff:ee:
b8:a3:4a:c7:ea:c4:e0:1c:68:7f:c0:59:39:ca:52:e0:8c:ad:
5d:b8:85:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:36 2026 by rpki-client